Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KRet0I4DPYDYZIi2K3aSpoMs5lU.roa
File: KRet0I4DPYDYZIi2K3aSpoMs5lU.roa (raw, json)
Hash identifier: kQ67XSjDrBG6Anhx5NMXmEWiNviaNjrJ6i6LKWH9eR0=
Subject key identifier: 29:17:AD:D0:8E:03:3D:80:D8:64:88:B6:2B:76:92:A6:83:2C:E6:55
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0D472A568490DFF85C4513F93BF06048
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KRet0I4DPYDYZIi2K3aSpoMs5lU.roa
Signing time: Sun 26 Nov 2023 20:16:56 +0000
ROA not before: Sun 26 Nov 2023 20:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0d:47:2a:56:84:90:df:f8:5c:45:13:f9:3b:f0:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 20:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2917add08e033d80d86488b62b7692a6832ce655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:0d:c7:d0:a3:2d:65:51:03:40:fb:02:af:
a8:cd:35:bd:e6:32:72:89:8d:0e:b0:54:08:82:2b:
92:95:da:59:43:b0:df:a8:87:b3:e4:64:9a:55:ae:
fc:0e:fa:2c:d8:f8:4f:02:4f:d2:a6:31:86:e4:fa:
7d:37:06:85:ee:06:54:35:fd:6e:dd:04:a0:ff:c8:
39:0b:35:e3:03:30:c7:3f:b1:ca:13:e4:74:92:2a:
d5:91:5d:05:b3:de:ff:5c:b1:75:93:7a:61:c3:e4:
88:ac:d1:e7:ce:e3:3a:0d:dd:36:1b:a3:ce:ab:59:
1d:64:a8:6c:2a:99:03:05:ab:e0:ef:bc:a2:62:c0:
6e:4f:5c:15:2e:47:40:44:e5:51:7a:9f:b5:1e:46:
33:d8:68:ce:6c:ae:ed:fc:5d:cc:88:6c:cc:7c:32:
75:78:78:f6:9a:86:20:50:eb:e0:81:19:4c:20:f0:
fa:4b:42:e1:0a:38:d3:8d:7a:b6:5c:4d:fa:d5:ce:
3a:f6:3a:66:7c:d2:e2:9a:ee:9a:66:51:87:41:7c:
98:52:26:51:a0:bd:98:eb:f9:d3:40:70:3e:7e:cc:
c5:51:88:ed:28:f4:fe:4c:b7:87:71:68:e3:b7:dc:
af:d7:b4:d6:6d:f8:b0:bf:9a:a3:bd:1e:d0:e0:22:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:17:AD:D0:8E:03:3D:80:D8:64:88:B6:2B:76:92:A6:83:2C:E6:55
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/KRet0I4DPYDYZIi2K3aSpoMs5lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c8:a0:99:a7:01:0b:3a:0b:d9:df:60:76:40:db:f1:2b:ed:b4:
83:60:a9:99:d6:2c:2e:4d:f6:0e:19:62:30:96:6b:c7:38:51:
0d:0e:55:61:bc:54:3f:7a:fc:38:c7:d2:23:d6:a4:69:21:07:
df:81:fb:31:ac:07:9c:6b:00:02:fa:b7:16:9b:7e:e0:79:e9:
2c:16:95:e2:63:26:31:60:b1:ba:31:d9:7c:dc:a8:9e:2f:9b:
9d:90:9e:e8:27:a4:92:3f:f3:89:81:d2:f1:5e:be:c6:e9:7e:
f0:73:b0:b5:dc:55:4f:35:53:58:9a:32:9c:66:ec:72:20:e0:
fc:97:86:14:6e:4b:4a:f4:56:3b:44:48:26:93:51:20:34:72:
87:20:55:32:06:a3:8b:2c:c4:ca:4c:9b:7e:05:3e:36:d6:bd:
ac:96:4f:5e:95:43:73:81:ba:57:57:d7:4e:8f:e4:16:b1:3a:
e8:bd:b9:01:37:c8:9e:89:e2:af:5d:82:e2:db:60:12:d6:c2:
e7:d1:9a:f2:f0:ca:b9:d2:88:3f:0e:18:b1:7e:14:52:2f:5b:
38:14:26:2b:b6:48:a6:8e:ff:69:0f:71:33:44:14:00:ff:35:
f1:8c:54:ba:75:b2:da:74:82:93:c7:62:ca:d8:69:e2:a4:4b:
c2:6f:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:34 2025 by rpki-client